Analysis
-
max time kernel
140s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
29/11/2022, 13:19
General
-
Target
032a14745f19e14ddcbf34a77233155ba9dd3a19fc9114c41ba9c229a035f4fb.exe
-
Size
2.6MB
-
MD5
3e9918491a7e1791f41e41a7d3b106dd
-
SHA1
77d77014f8406c8a183bb7371892fc95a952345b
-
SHA256
032a14745f19e14ddcbf34a77233155ba9dd3a19fc9114c41ba9c229a035f4fb
-
SHA512
1c61595cbe40cf49731211b5461b57abb97509b89ae1e2b89b8c86664efd6abee950b20df98d33f4d358fb8985ba53cd7a7ae19e9f1c140372b4028ee2416969
-
SSDEEP
49152:zOITT3xV2PbqQH6vxlCwSINgUx9xhDc6CvgqwPfGoeRmUMLnMKy3k:zOIpV4b/HWxWGpPCvhwmr+4k
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\032a14745f19e14ddcbf34a77233155ba9dd3a19fc9114c41ba9c229a035f4fb.exe"C:\Users\Admin\AppData\Local\Temp\032a14745f19e14ddcbf34a77233155ba9dd3a19fc9114c41ba9c229a035f4fb.exe"1⤵